Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: uYkfZSFgKJRrYqBzPjoKcJ59f+QQJ5jUfahAV4Lhb1s=
Subject key identifier: FE:A8:24:0F:2C:57:5F:F8:E1:42:BE:7D:62:B9:2F:BC:82:55:D3:61
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 019A0147E6418156680899EDC7A65EE37AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 16A3
Signing time: Mon 20 Oct 2025 11:01:20 +0000
Manifest this update: Mon 20 Oct 2025 11:01:20 +0000
Manifest next update: Tue 21 Oct 2025 11:01:20 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: Z4MYywQ+gKh1xv1RIQm3SUcRaaNub4Okg/ELotkDEBU=)
2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e6:41:81:56:68:08:99:ed:c7:a6:5e:e3:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Oct 20 11:01:20 2025 GMT
Not After : Oct 21 11:01:20 2025 GMT
Subject: CN=fea8240f2c575ff8e142be7d62b92fbc8255d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:2f:44:20:3a:42:3e:fb:c2:1a:d1:5b:98:
58:35:82:2f:e7:22:b0:fc:5c:c3:85:a6:e1:9a:1f:
66:55:fe:6b:12:d9:b2:00:b6:fa:ed:66:40:3b:39:
b5:bf:56:8e:bc:f8:27:7a:6a:ce:c6:2b:e2:02:68:
b8:83:9e:86:07:28:09:ae:b4:dd:3c:6c:c8:75:bf:
f0:5c:54:2d:29:38:d4:d0:4a:49:4b:cf:6e:c8:48:
6a:69:69:3f:ac:7a:7a:e4:a7:74:9a:86:7a:87:62:
ea:9c:17:65:d0:95:3b:7d:85:75:d5:b1:23:62:09:
3c:db:ed:dc:5e:50:75:b6:08:d6:74:d4:c1:7e:a8:
2a:33:cd:f5:46:16:77:53:50:52:1f:8f:f6:b3:f2:
cf:ed:b5:ed:63:7a:53:c6:e4:49:3a:2e:7d:2e:06:
3d:6b:5b:3b:37:07:2d:17:2f:74:e9:b3:35:de:08:
fe:12:2b:3d:94:e4:49:2d:6f:26:62:8b:2b:eb:db:
c0:eb:48:4f:67:cc:00:c4:f6:21:f7:52:57:f4:a9:
e2:c4:5b:eb:d1:5c:6c:a5:10:b9:89:8b:00:c0:13:
e5:dd:ac:3b:fc:c2:95:d9:3a:29:d3:dd:fe:e3:4b:
da:9e:be:86:5d:0f:48:1b:2c:5f:57:d9:1e:78:65:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:24:0F:2C:57:5F:F8:E1:42:BE:7D:62:B9:2F:BC:82:55:D3:61
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:10:93:47:b4:00:01:f1:9c:b7:df:dd:c4:b1:3f:39:e1:b8:
3b:66:1b:11:95:e3:7a:68:d8:ca:a4:8c:54:b1:df:28:90:2c:
05:98:f2:e3:98:a4:81:c6:1a:c6:fb:8c:af:dc:ab:3d:ac:cf:
55:92:76:57:fe:c2:7b:1a:fe:8b:6d:c5:11:4f:cd:25:90:67:
83:43:04:57:b1:d7:23:a0:88:b4:44:b2:dc:68:56:95:41:32:
1b:7c:7c:1e:56:14:c3:67:07:54:30:25:a0:cc:8a:6a:d3:8c:
07:3d:ff:9d:92:24:e3:31:d3:4a:3f:9b:84:c3:d6:4a:b0:ad:
c6:25:fd:7c:ae:2b:9e:8a:af:a9:18:48:67:7f:66:eb:98:10:
a3:a0:8a:34:76:e5:0b:a9:bc:f2:84:71:c1:fe:90:63:88:24:
21:bc:0e:e1:17:3e:b5:15:5b:43:93:8a:68:81:c4:f2:01:90:
39:0d:7c:13:39:86:eb:cc:a7:f7:4e:ba:f7:c1:57:ca:fb:99:
e8:4c:b9:03:65:21:5f:a4:2b:a5:17:91:7e:23:8e:8e:1e:94:
4b:a3:c0:bc:e3:88:b2:e8:f2:37:36:7f:98:31:76:e7:1d:65:
fa:4f:5e:31:bf:fd:0d:69:a0:bd:a1:79:6a:1c:e5:53:99:62:
7c:ea:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:43 2025 by rpki-client